Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json)
Hash identifier: CXRBkAHpTdOhPydX626ZTFESHnyQ9uWVs+mgn/26oNI=
Subject key identifier: 98:75:AA:02:95:6A:4D:61:6B:77:BB:DA:5F:06:18:FD:FA:2B:22:4E
Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Certificate serial: 0196AB7A7B8FA7873C7C0F831760A005578E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
Manifest number: 152E
Signing time: Wed 07 May 2025 16:00:52 +0000
Manifest this update: Wed 07 May 2025 16:00:52 +0000
Manifest next update: Thu 08 May 2025 16:00:52 +0000
Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: ZKLt7ANOQRg5QYa2NL1tSqx4lc4kyMJlRTZP1lGTo1I=)
2: W9bI_JNQHDDt7Tw4mN0K9_OAUEo.roa (hash: H3aapZtXnHfhVIDiayaGFZvNcV7JScFiYfbfDkzVZMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:7a:7b:8f:a7:87:3c:7c:0f:83:17:60:a0:05:57:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Validity
Not Before: May 7 16:00:52 2025 GMT
Not After : May 8 16:00:52 2025 GMT
Subject: CN=9875aa02956a4d616b77bbda5f0618fdfa2b224e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:69:8b:22:6e:ae:41:54:c3:0c:2b:65:5f:19:
39:40:8e:d6:d8:9e:9b:ce:fe:d1:f5:9d:d2:ce:b9:
06:63:a7:a0:42:27:bd:e3:46:9b:88:0a:ed:48:c4:
40:c2:a2:2a:d5:12:1c:d0:0a:84:15:3c:02:4f:14:
0e:a4:84:24:a4:ed:03:53:e5:0c:30:dd:47:34:bf:
cc:56:96:b6:ec:2f:1a:17:16:00:c1:18:4f:e8:de:
8a:b4:5d:76:52:3d:57:86:4a:5c:01:42:2b:ab:cf:
15:29:16:97:20:1c:2c:84:c2:63:6d:f0:4a:59:32:
3a:1d:9c:e8:f1:fd:6e:f3:c4:1a:12:96:aa:a4:15:
b8:fe:1b:9d:64:26:40:a1:37:94:d6:18:00:8d:75:
12:db:da:a4:e6:1e:45:6f:36:8d:4b:0b:96:f1:c1:
44:ac:4d:d4:8c:f5:de:67:de:19:f9:7a:81:9d:e3:
60:ec:14:0c:39:61:4c:8c:68:92:4a:ef:54:9a:8d:
00:e2:6f:ad:da:c6:ce:c0:22:c6:1b:36:85:01:3f:
e9:48:97:1f:93:a3:22:03:73:27:bb:09:8e:c7:1d:
68:e5:b8:d8:97:20:3f:13:eb:06:a2:4b:87:a4:3c:
22:f7:ee:0b:a6:f8:f7:bf:1a:2c:a4:b1:01:92:fb:
e5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:75:AA:02:95:6A:4D:61:6B:77:BB:DA:5F:06:18:FD:FA:2B:22:4E
X509v3 Authority Key Identifier:
keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3c:d5:c0:ff:02:c7:8a:70:b4:2b:24:7f:d9:3b:b7:5c:b9:
86:11:eb:4b:f5:4e:ee:07:e0:b2:66:d0:5c:1b:80:39:c3:63:
a5:f9:99:e5:0b:94:29:1c:07:28:d1:ae:f4:0f:f7:4c:4f:46:
11:62:20:7a:46:cd:6d:8b:61:cc:1a:64:ed:b2:8a:b5:a3:d9:
15:9c:f0:8e:80:f5:83:8b:65:3a:d9:67:24:e9:65:4a:6b:41:
df:94:50:0e:7d:07:66:31:5b:2b:37:38:e5:f4:64:a4:7e:40:
3d:8e:dc:69:7d:8a:c2:96:b9:ef:c1:d4:c4:6b:b6:51:8c:41:
eb:c3:ea:b1:35:dc:d1:ee:ea:e3:d7:87:95:19:a6:76:5d:1c:
64:76:98:ad:2b:cf:72:cf:e8:fa:0c:f2:fb:71:92:f3:ea:bd:
f6:1b:44:af:8b:1e:dc:78:d7:49:79:cb:05:1e:d3:ba:11:b2:
39:57:83:ec:83:fa:55:30:0e:d8:f4:ae:70:15:e1:6c:d4:98:
af:98:d4:48:61:7f:52:87:e6:2f:7b:53:bb:d6:e6:33:d2:65:
a0:9a:4a:06:86:ad:97:3c:fc:c7:52:b2:8b:2b:d7:7e:71:82:
c5:9c:3b:e1:54:1e:f4:5c:2c:2e:c1:4e:09:15:41:38:05:87:
9e:8b:b3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:02:11 2025 by rpki-client